Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
File: Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft (raw, json)
Hash identifier: ECyyN2spH5GLfhe62ymicXHhhre0uv3pKEA5FwrHEEE=
Subject key identifier: 9A:FD:01:77:81:66:A4:C5:49:A7:F4:60:4C:8E:17:56:ED:05:2E:99
Authority key identifier: 62:D9:B5:DA:84:61:0E:D2:20:F6:D0:FD:1A:88:8D:1F:94:63:F5:95
Certificate issuer: /CN=62d9b5da84610ed220f6d0fd1a888d1f9463f595
Certificate serial: 019EB6FC0D98D9461BF9E49E2538EB0B072A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
Manifest number: 0145
Signing time: Thu 11 Jun 2026 14:00:32 +0000
Manifest this update: Thu 11 Jun 2026 14:00:32 +0000
Manifest next update: Fri 12 Jun 2026 14:00:32 +0000
Files and hashes: 1: Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl (hash: rKDOdO2uy5nlrVJlR8Sa/yrprL+9eySQn5wGDl8al1I=)
2: dfKf0SUwjmWHGeIDN6xaPuWneS0.roa (hash: KNktDMnqe7pkdReM74aezUUfDskVVEXdt3/JJZM1pKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:fc:0d:98:d9:46:1b:f9:e4:9e:25:38:eb:0b:07:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d9b5da84610ed220f6d0fd1a888d1f9463f595
Validity
Not Before: Jun 11 14:00:32 2026 GMT
Not After : Jun 12 14:00:32 2026 GMT
Subject: CN=9afd01778166a4c549a7f4604c8e1756ed052e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6c:2b:48:d7:8f:26:07:37:94:11:f8:18:fb:
15:28:56:55:66:5f:a7:ce:97:94:70:62:df:a5:a5:
7a:f3:fa:93:b7:89:fd:f5:e8:3f:ab:42:d6:99:bb:
2f:9f:6f:70:9f:6a:22:0e:a6:aa:1f:6a:df:92:58:
b4:20:ff:4a:2c:64:ee:b3:fe:20:6d:bf:20:76:bb:
87:8b:24:f1:66:4b:2e:54:56:28:a0:7d:df:06:5d:
94:26:fe:ab:ce:80:c3:42:8c:d4:16:81:19:60:3b:
c5:e0:bf:43:30:14:da:41:8d:da:3e:e3:7a:9d:63:
9c:b4:55:27:8e:3d:1d:8d:d8:9f:3c:20:b6:41:ed:
ca:72:c9:29:8c:a5:de:77:87:c1:e3:b1:40:26:00:
b1:70:49:b8:95:46:7d:f7:34:38:32:3c:2b:54:7d:
33:b7:85:b1:fa:44:c8:a5:25:44:b2:24:d4:67:91:
7f:bd:c9:e4:26:9a:3f:b4:2b:fb:a6:0f:4c:9a:74:
5c:0a:68:87:89:dd:80:83:9c:19:b8:37:39:e7:ec:
3e:a9:e9:64:aa:79:21:6e:bd:8b:76:2e:13:12:2d:
2d:b0:e1:ad:02:74:dd:f6:6a:a8:59:41:be:3e:52:
9d:a3:c8:bb:87:87:0c:fb:85:c7:63:22:ef:cc:85:
92:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FD:01:77:81:66:A4:C5:49:A7:F4:60:4C:8E:17:56:ED:05:2E:99
X509v3 Authority Key Identifier:
keyid:62:D9:B5:DA:84:61:0E:D2:20:F6:D0:FD:1A:88:8D:1F:94:63:F5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:76:74:ce:98:89:ec:be:b0:d1:4d:a2:e8:79:7c:8b:9a:4b:
09:fe:4f:4b:e8:f7:7e:97:be:3b:06:98:24:1f:f4:e0:51:79:
ae:f4:2b:86:82:a4:8d:8e:a3:19:a3:59:04:00:c1:39:3c:4b:
2e:e0:c6:a0:14:b2:0b:62:b6:84:e1:a7:e7:0a:f1:e6:05:66:
be:bd:71:7d:8a:ae:e2:e6:48:08:7d:3d:a3:02:5f:f7:58:18:
01:72:d3:6b:f1:40:18:40:3e:21:e6:44:05:a0:ba:b8:87:45:
5d:3d:79:09:96:c2:49:93:5e:58:65:c0:33:fa:e4:93:f4:42:
a1:6e:54:b2:00:e2:a7:f8:2e:cf:e5:c6:f1:fc:80:99:4a:f0:
74:03:05:8f:37:5b:91:20:45:3b:87:45:99:7a:f3:76:33:1e:
d3:48:e9:b6:83:38:8b:08:91:18:68:3c:fd:5b:5a:4e:c5:b9:
4c:ec:69:a0:2f:fb:e5:da:46:b6:ca:62:74:ae:af:04:fc:4a:
4b:66:38:c3:49:a9:61:b6:43:3b:c1:59:39:97:a7:b8:57:82:
4b:79:24:52:7d:0b:8d:0f:c8:61:75:dc:e8:2e:88:48:b8:15:
54:c8:e6:bb:10:8e:f5:f5:9b:3e:9b:33:d1:56:bb:3f:cc:d8:
44:f9:93:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:03:23 2026 by rpki-client